diff options
Diffstat (limited to 'poky/meta/recipes-support/rng-tools/rng-tools/rng-tools.service')
| -rw-r--r-- | poky/meta/recipes-support/rng-tools/rng-tools/rng-tools.service | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/poky/meta/recipes-support/rng-tools/rng-tools/rng-tools.service b/poky/meta/recipes-support/rng-tools/rng-tools/rng-tools.service new file mode 100644 index 0000000000..568686e80e --- /dev/null +++ b/poky/meta/recipes-support/rng-tools/rng-tools/rng-tools.service @@ -0,0 +1,33 @@ +[Unit] +Description=Hardware RNG Entropy Gatherer Daemon +DefaultDependencies=no +After=systemd-udev-settle.service +Before=sysinit.target shutdown.target +Wants=systemd-udev-settle.service +Conflicts=shutdown.target + +[Service] +EnvironmentFile=-@SYSCONFDIR@/default/rng-tools +ExecStart=@SBINDIR@/rngd -f $EXTRA_ARGS +CapabilityBoundingSet=CAP_SYS_ADMIN +IPAddressDeny=any +LockPersonality=yes +MemoryDenyWriteExecute=yes +NoNewPrivileges=yes +PrivateTmp=yes +ProtectControlGroups=yes +ProtectHome=yes +ProtectHostname=yes +ProtectKernelModules=yes +ProtectKernelLogs=yes +ProtectSystem=strict +RestrictAddressFamilies=AF_UNIX +RestrictNamespaces=yes +RestrictRealtime=yes +RestrictSUIDSGID=yes +SystemCallArchitectures=native +SystemCallErrorNumber=EPERM +SystemCallFilter=@system-service + +[Install] +WantedBy=sysinit.target |